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1 DETAILED ACTION 

2 

3 Drawings 
4 

5 The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(5) 



6 because they include the following reference character(s) not mentioned in the 

7 description: 317, 680, 740, 750, 760, and 770. Corrected drawing sheets in compliance 

8 with 37 CFR 1 .121 (d), or amendment to the specification to add the reference 

9 character(s) in the description in compliance with 37 CFR 1.121(b) are required in reply 

10 to the Office action to avoid abandonment of the application. Any amended replacement 

1 1 drawing sheet should include all of the figures appearing on the immediate prior version 

12 of the sheet, even if only one figure is being amended. Each drawing sheet submitted 

1 3 after the filing date of an application must be labeled in the top margin as either 

14 "Replacement Sheet" or "New Sheet" pursuant to 37 CFR 1.121(d). If the changes are 

1 5 not accepted by the examiner, the applicant will be notified and informed of any required 

16 corrective action in the next Office action. The objection to the drawings will not be held 

17 in abeyance. 
18 

1 9 Claim Objections 

20 

21 Claim 4 is objected to because of the following informalities: lines 3 and 12 

22 contain grammatical errors. Appropriate correction is required. 
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1 Claim Rejections - 35 USC §112 
2 

3 Claim 4 is rejected as failing to define the invention in the manner required by 35 

4 U.S.C. 1 12, second paragraph. 

5 The claim must be in one sentence form only. 
6 

7 Claim Rejections - 35 USC § 102 

8 

9 The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 

10 form the basis for the rejections under this section made in this Office action: 

11 A person shall be entitled to a patent unless - 

1 2 (b) the invention was patented or described in a printed publication in this or a foreign country or in public 

1 3 use or on sale in this country, more than one year prior to the date of application for patent in the United 

14 States. 
15 

16 Claims 1-3, 6, 7, 10, 11, 14, 15, and 18 are rejected under 35 U.S.C. 102(b) 

17 as being anticipated by Schneier, Applied Cryptography . 

18 

19 Regarding claim 1, Schneier discloses a method comprising: 

20 establishing a physical channel between a sender and a receiver (Schneier, pg . 

21 2, par. 1; pgs. 22,23; pgs. 576, 577). As disclosed by Schneier, the disclosed method 

22 deals with computer cryptography. The method is implemented on a computer network 

23 with hardware such as PCs or VAXs, and is a communication protocol between senders 

24 and receivers on the computer network. Alice and Bob represent the network senders 
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1 and receivers. Thus, Schneier discloses a physical channel between a sender and 

2 receiver. 

3 sending, from the sender to the receiver, data through a data channel (Schneier, 

4 pg. 576, protocol steps 2,3). Data is sent from a sender to a receiver, thus a data 

5 channel exists. 

6 receiving, at the receiver, the data (Schneier, pg. 576, protocol steps 3,4). 

7 and verifying, between the receiver and the sender via the physical channel, that 

8 the data is from the sender (Schneier, pg. 576, protocol steps 3-5). 
9 

10 Regarding claim 2, Schneier discloses wherein that data includes: 

11 a key; and a nonce (Schneier, pg. 576, protocol steps 1-3). 
12 

13 Regarding claim 3, Schneier discloses wherein the verifying comprises 

14 performing receiver-initiated verification (Schneier, pg. 577, protocol steps 9-1 1)\ 
15 

1 6 Regarding claims 6,7,10, and 1 1 , they recite the limitations found in claims 1 -3, 

1 7 and are rejected by the same rational. 
18 

19 Regarding claim 14, it is the system claim corresponding to the method of claim 

20 1 , and is rejected by the same rational. 
21 

22 Regarding claim 15, Schneier discloses: 
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1 an information generation mechanism for generating the data (Schneier, pg. 576, 

2 protocol steps 1, 2). 

3 a transmitter for transmitting the data to the receiver via the data channel 

4 (Schneier, pg. 576, protocol step 3). 

5 a first verification mechanism for verifying, via the physical channel, that the data 

6 received by the receiver is from the sender (Schneier, pg. 577, protocol steps 16). 
7 

8 Regarding claim 18, it recites the same limitations as claim 15, and is rejected by 

9 the same rational. 
10 

11 

1 2 Claim Rejections - 35 USC § 103 

13 

14 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

15 obviousness rejections set forth in this Office action: 

16 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

1 7 forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 

1 8 the prior art are such that the subject matter as a whole would have been obvious at the time the 

1 9 invention was made to a person having ordinary skill in the art to which said subject matter pertains. 

20 Patentability shall not be negatived by the manner in which the invention was made. 
21 

22 Claims 4, 5, 8, 9, 12, 13, 16, 17, 19 - 29 are rejected under 35 U.S.C. 103(a) as 

23 being unpatentable over Schneier, Applied Cryptography . 

24 



25 Regarding claim 4, Schneier discloses wherein the performing receiver-initiated 

26 verification comprises repeating, by the receiver upon receiving the data, the nonce to 
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1 generate a repeating nonce (Schneier, pg. 577, protocol step 10). The sender repeats 

2 the nonce R a . He further discloses perceiving, by the sender, the repeating nonce 

3 (Schneier, pg. 577, protocol step 16), and verifying the perceived repeating nonce is 

4 semantically related to the nonce sent (Schneier, pg. 577, protocol step 16). 

5 While Schneier discloses acknowledging to the receiver that the verification 

6 message was successful (Schneier, pg. 577, protocol step 17), he does not disclose 

7 that this is based upon if the perceived repeating nonce is verified. However, in step 16, 

8 the sender checks that the received nonce R a is equal to the sent nonce R a , thus 

9 verifying that the receiver had successfully received the sender's message containing 

10 the key. Steps 1 - 19 of Schneier' s authentication protocol demonstrate an ordered 

1 1 progression of communications toward the goal of establishing secure and 

12 authenticated communication link. It is obvious, based upon logical reasoning, that the 

13 sender's acknowledgement message in step 17, is in view of the verification in the 

14 preceding step 16. In like manner, it is logical to conclude that the verification in step 

15 16, is performed for a purpose, and should step 16 fail, the sender would not purpose to 

16 continue in the ordered progression of communications to step 17. Thus, it would have 

17 been obvious to one of ordinary skill in the art, based upon logical reasoning, to 

18 recognize that the disclosure of Schneier implies the acknowledgement to the receiver 

1 9 that the verification message was successful if the perceived repeating nonce is 

20 verified, because it is logical to conclude that if the repeating nonce were not verified, 

21 step 17 would not be performed. 
22 
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1 Regarding claim 5, the qualification of Schneier discloses sending, from the 

2 sender to the receiver, if the verifying is successful, a signed message (Schneier, pg. 

3 577, protocol step 17). The qualification of Schneier further discloses, verifying the 

4 signature in the signed message using the stored key (Schneier, pg. 577, protocol step 

5 18). Notice, the key obtained by the receiver in step 4 is employed at a later time by the 

6 receiver in step 18. Therefore, Schneier implies using the stored key. 



7 The qualification of Schneier does not disclose that the key is stored by the 

8 receiver if the verifying is successful. However, it is logical that a receiver, desiring a 

9 verified key for communication, would proceed to store (instead of discarding) the key in 

1 0 memory for future use if it were verified. Therefore, it would have been obvious to one 

1 1 of ordinary skill in the art, based upon logical reasoning, to recognize that the 

12 qualification of Schneier implies storing the key if it were verified, because a receiver 

1 3 desiring to employ a verified key would store the verified key for future use. 
14 

15 Regarding claims 8, 9, 12, and 13, they recite the limitations found in claims 4 

16 and 5, and are rejected by the same rational. 
17 

18 Regarding claim 16, the qualification of Schneier discloses: 

1 9 a transmission receiver for intercepting the data, sent from the sender through 

20 the data channel (Schneier, pg. 576, protocol steps 3,4). As explained in claim 1, Alice 

21 and Bob represent senders and receivers on a computer network. Thus, Schneier, 

22 discloses a transmission receiver (Bob). 
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1 a second verification mechanism for verifying, via the physical channel and 

2 cooperating with the first verification mechanism in the sender, that the data received is 

3 from the sender (Schneier, pg. 576, protocol steps 4-8). 

4 and a key storage for storing a key included in the received data, if the verifying 

5 is successful (Schneier, pgs. 576, 577, protocol steps 4-8). 
6 

7 Regarding claim 17, the qualification of Schneier discloses: 

8 the sender further comprising a signed message generation mechanism for 



9 generating a signed message to be sent, after the verifying, to the receiver through the 

10 transmitter, the signed message including a signature of the sender (Schneier, pgs. 

1 1 576, 577, protocol steps 1 , 2, 3, 17). Schneier discloses that the sender comprises the 

12 ability to generate data and construct a message, the message bearing the signature of 

13 the sender. Thus, Schneier discloses that 



14 the receiver further comprising a signature verification mechanism for verifying, 

15 upon receiving the signed message, the signature of the sender received through the 

16 transmission receiver. 
17 

18 Regarding claim 19, it recites the limitations found in claim 8, and is rejected by 

19 the same rational. 
20 

21 Regarding claims 20 and 21 , they recite the same limitations found in claims 17 

22 and 16, and are rejected by the same rational. 
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1 

2 Regarding claim 22, the qualification of Schneier discloses a receiver-initiated 

3 verification mechanism for performing a receiver-initiated verification, comprising: 

4 an nonce repeater for generating a repeating nonce using the nonce contained in 

5 the data sent from the sender (Schneier, pg. 577, protocol step 10). 

6 and an acknowledgement perceiver for perceiving an acknowledgement from the 

7 sender that acknowledges that the repeating nonce is same as the nonce contained in 

8 the data (Schneier, pg. 577, protocol steps 18, 19). 
9 

10 Regarding claim 23, the qualification of Schneier discloses a signature 

1 1 verification mechanism for verifying the signature of the sender contained in a signed 

1 2 message, sent from the sender after the verifying and received by the receiver through 

13 the transmission receiver (Schneier, pg. 577, protocol step 18). 
14 

15 Regarding claim 24, the qualification of Schneier does not disclose a computer- 



16 readable medium encoded with a program. However, it is obvious that the sending and 

17 receiving computers of data on the computer network disclosed by Schneier would 

18 comprise a medium encoded with computer instructions. Thus, it would have been 

1 9 obvious to one of ordinary skill in the art to recognize that the qualification of Schneier 

20 would contain computer readable medium encoded with a program because a network 

21 of operating computers could not operate without computer instructions embodied in a 

22 medium. 
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1 Therefore, the qualification of Schneier discloses: 

2 sending, from a sender to a receiver, data through a data channel (Schneier, pg. 

3 576, protocol step 3). 

4 receiving, at receiver, the data (Schneier, pg. 576, protocol steps 3,4). 

5 storing, by the receiver, a part of the data as a stored key, after verifying, via a 

6 physical channel established between the sender and the receiver, that the data 

7 received by the receiver is from the sender (Schneier, pg. 576, protocol steps 4,5,10, 

8 and 18). 

9 sending, from the sender to the receiver, if the verification is successful, a signed 

10 message containing a signature of the sender (Schneier, pg. 577, protocol steps 16, 

11 17). 

12 receiving, at the receiver, the signed message (Schneier, pg, 577, protocol steps 

13 17,18). 

14 and authenticating the signature in the signed message using the stored key 

15 (Schneier, pg. 577, protocol step 18). 
16 

17 Regarding claim 25, the qualification of Schneier discloses: 

1 8 performing receiver-initiated verification via the physical channel (Schneier, pgs. 

19 576, 577, protocol steps 1-19). 
20 

21 Regarding claims 26 - 29, they recite the same limitations found in claims 24 and 

22 25, and are rejected by the same rational. 
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2 



Conclusion 



3 



4 



Any inquiry concerning this communication or earlier communications from the 



5 examiner should be directed to Jeffery Williams whose telephone number is (571) 272- 

6 7965. The examiner can normally be reached on 8:30-5:00. 



8 supervisor, Andrew Caldwell can be reached on (571) 272-3868. The fax phone 

9 number for the organization where this application or proceeding is assigned is 703- 
10 872-9306. 



12 Patent Application Information Retrieval (PAIR) system. Status information for 

13 published applications may be obtained from either Private PAIR or Public PAIR. 

14 Status information for unpublished applications is available through Private PAIR only. 

15 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

16 you have questions on access to the Private PAIR system, contact the Electronic 

17 Business Center (EBC) at 866-217-9197 (toll-free). 



7 



If attempts to reach the examiner by telephone are unsuccessful, the examiner's 



11 



Information regarding the status of an application may be obtained from the 



18 
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21 
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